When was the Esse Health cyberattack discovered?

The cyberattack was discovered on April 21, 2025, when suspicious activity was identified within Esse Health's network infrastructure. The organization immediately started an investigation with external cybersecurity experts and notified law enforcement.

How many patients were affected by the Esse Health breach?

The cyberattack affected 263,601 individuals who had their personal and medical information compromised during the security incident.

What type of information was stolen in the Esse Health attack?

The exposed data includes names, addresses, dates of birth, Social Security numbers, medical record numbers, patient account numbers, health information, and health insurance details of affected individuals.

What is Esse Health and what services do they provide?

Esse Health is a physician group that serves the Greater St. Louis metropolitan area in Missouri, providing medical care and healthcare services to patients throughout the region.

What type of cyberattack was used against Esse Health?

The nature of the attack has not been disclosed by Esse Health. The organization has not provided details about whether it was a ransomware attack, data theft, or other type of cybersecurity incident.

How did Esse Health respond to the cyberattack?

Esse Health started an investigation with the assistance of external cybersecurity experts, notified law enforcement about the incident, and implemented manual processes and alternative communication channels to maintain patient care during the response.

Has the stolen information from Esse Health been misused?

Esse Health has stated that there is currently no indication that any of the compromised information has been misused. However, the organization is taking precautionary measures to protect affected individuals.

What support is Esse Health offering to affected patients?

Esse Health is offering 12 months of free identity protection services to individuals whose information was compromised in the cyberattack, helping them monitor for potential misuse of their personal and medical information.

What should patients affected by the Esse Health breach do?

Affected patients should take advantage of the free 12-month identity protection services offered by Esse Health, monitor their financial accounts and credit reports for suspicious activity, be vigilant for medical identity theft, review healthcare and insurance statements for unauthorized services, and report any suspicious activity to authorities and their healthcare providers.

Which areas are served by Esse Health?

Esse Health serves the Greater St. Louis metropolitan area in Missouri, providing healthcare services to patients throughout this region.

What systems were compromised in the Esse Health attack?

The cyberattack compromised Esse Health's electronic medical record system and disabled their phone communications infrastructure, significantly impacting their ability to access patient records and communicate normally.

How can patients contact Esse Health after the cyberattack?

Since the attack disabled phone communications, Esse Health had to implement alternative communication channels to maintain patient care. Patients should check with the organization directly for current contact methods and service availability.

What should patients watch for after the Esse Health data breach?

Patients should monitor for signs of identity theft and medical fraud, including unauthorized medical services, insurance claims they didn't authorize, unexpected medical bills, and suspicious activity on financial accounts. They should also be cautious of phishing attempts that may use their compromised personal information.

Incident

Cyberattack in Missouri healthcare provider Esse Health exposes data of over 263,000 patients

Q: What happened to Esse Health?

Esse Health, a physician group serving the Greater St. Louis metropolitan area in Missouri, was hit by a cyberattack that resulted in the theft of personal and medical information belonging to 263,601 individuals. The attack impacted their electronic medical record system and disabled phone communications.

Q: How did the cyberattack impact Esse Health's operations?

The attack impacted Esse Health's electronic medical record system and disabled phone communications, forcing the organization to use manual processes and alternative communication channels to maintain patient care during the incident response.

published: July 1, 2025

Learn More

Esse Health, an physician group serving the Greater St. Louis metropolitan area in Missouri, was hit by a cyberattack that resulted in the theft of personal and medical information belonging to 263,601 individuals.

The cyberattack was discovered on April 21, 2025, when suspicious activity was identified within Esse Health's network infrastructure. The organization started an investigation with the assistance of external cybersecurity experts and notified law enforcement. The attack impacted the healthcare provider's electronic medical record system and disabled phone communications, forcing the organization to use manual processes and alternative communication channels to maintain patient care.

Exposed data includes:

Names
Addresses
Dates of birth
Social Security numbers
Medical record numbers
Patient account numbers
Health information
Health insurance details

The nature of the attack has not been disclosed. Esse Health has stated that there is currently no indication that any of the compromised information has been misused, but the organization is offering 12 months of free identity protection services.

Cyberattack in Missouri healthcare provider Esse Health exposes data of over 263,000 patients

Read More
Loretto Management Corporation reports cyberattack, data breach
Covenant Health Systems hit by cyberattack, exposes patient …
Long Island Weight Loss Institute Reports Data Breach …
New Age Dermatology LLC Reports Ransomware Attack Impacting …
Gaylord Healthcare hit by SAFEPAY ransomware attack exposing …